CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

• CWE-327

• https://github.com/sybrenstuvel/python-rsa/issues/146Issue Tracking, Third Party Advisory
• https://github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2KILTHBHNSDUCYV22ODLOKTICJJ7JQIQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/
• https://usn.ubuntu.com/4478-1/Third Party Advisory
• https://github.com/sybrenstuvel/python-rsa/issues/146Issue Tracking, Third Party Advisory
• https://github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2KILTHBHNSDUCYV22ODLOKTICJJ7JQIQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/
• https://usn.ubuntu.com/4478-1/Third Party Advisory

Published

Jun 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13750Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-13751Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-13752Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-13753The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to…10
• CVE-2020-13754hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger…6.7
• CVE-2020-13756Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontr…9.8
• CVE-2020-13758modules/security/classes/general.post_filter.php/post_filter…6.1
• CVE-2020-13759rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allow…7.5
• CVE-2020-1376<p>An elevation of privilege vulnerability exists in the way…7.8
• CVE-2020-13760In Joomla! before 3.9.19, missing token checks in com_postin…8.8
• CVE-2020-13761In Joomla! before 3.9.19, lack of input validation in the he…6.1
• CVE-2020-13762In Joomla! before 3.9.19, incorrect input validation of the …6.1